A Belarusian national, Maksim Silnikau, has been sentenced to 16 years in prison for his role in creating and operating the Ransom Cartel ransomware scheme. The 40-year-old, also known by the aliases J.P. Morgan, xxx, and lansky, was found to have participated in cybercrime activities since at least 2005, including membership in the cybercrime forum Direct Connection from 2011 to 2016.
Silnikau initiated the Ransom Cartel operation in 2021, actively recruiting participants from various cybercrime forums. The group is linked to attacks on at least 18 organizations between 2021 and 2023, attempting to extort a total of at least $5.2 million from its victims.
The targets of these attacks were diverse, encompassing law firms, medium-sized businesses, a small medical technology startup, educational institutions, and large multinational corporations located in states such as California, New York, and Nebraska. Some victims experienced operational disruptions lasting several months due to the attacks.
As the architect of Ransom Cartel, Silnikau provided his co-conspirators with essential tools and information for their attacks. This included stolen credentials and mechanisms designed to encrypt compromised computer systems. He also developed and maintained a dedicated website that served as a central hub for monitoring and controlling ongoing attacks, facilitating communication between co-conspirators and victims, negotiating ransom demands, and managing the distribution of illicit funds among the participants.
Silnikau pleaded guilty to charges of conspiracy to commit wire fraud and aggravated identity theft. His activities with Ransom Cartel ceased following his arrest.
Prior to his capture, Silnikau fled from Spain while awaiting extradition to the United States. He was subsequently apprehended in Poland in July 2023 as he attempted to return to Belarus and was extradited to the United States in August 2023. Authorities noted that while Ransom Cartel did not achieve the scale of some larger ransomware operations, Silnikau's capture effectively dismantled the group.
